Vulnerability in Cisco Telepresence Tc Software

CVE-2015-4271

Cisco TelePresence TC before 7.3.4 on Integrator C devices allows remote attackers to bypass authentication via vectors involving multiple request parameters, aka Bug ID CSCuv00604.

EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 7.3.0, 7.3.1, 7.3.2
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)